- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Deep
Settings Customization
The Deep Settings Customization feature is available on devices running Knox v3.4 and higher with a KPE Premium license.
1. Create and configure deep settings
The following example describes the process to create and configure a new policy that hides all notifications on the screen when the device is locked.
- In your UEM console, open the Device Configuration Profile that is associated with your target devices. On the middle navigation menu, click Properties. The Device Configuration Policy Properties page opens.
-
On the Properties page, in the Settings list, click
Configured. The OEMConfig page for the Device Configuration
Policy opens.
- On the OEMConfig page, next to Device and Settings customization profile, click Configure. The Device and Settings customization profile page opens.
- On the customization profile page, next to the Configure values in settings menu title, click Configure. The Configure values in settings menu page opens to show a refreshed navigation menu to its immediate left.
- On the refreshed navigation menu, click Configure values in settings menu > Add setting. The Configure values in settings menu page opens to show fields and controls that help you customize your device settings.
- Do as follows:
- In the Name of the setting item list, select Lock screen > Notifications > Hide content.
- In the Set value for setting list, select On.
- If you want to allow the device user to change this setting, in the Allow end-user modification of this setting field, click True.
- Click OK. The new setting is created and you can now deploy it to your target devices. For information, go to: Deploy deep settings.
Side key
The side key used to be a single purpose power key, but on newer devices you can program the side key to perform multiple functions depending on how it is pressed.
- Double press
- Long press
You can use this key to configure quick launch camera, open Bixby or open any app installed on the device. This can be done using Device key mapping.
It can be used to wake Bixby or open the power off menu on long press. Wake Bixby is currently supported only in Work Profile on Corporate owned (WP-C) devices and will be grayed out in other modes. Power Off is currently supported in both Device Owner (DO) and WP-C modes.
The Side Key press and hold can be configured in Device and Settings customization profile > Configure values in settings menu > Configure a setting menu item.
Configure the Side Key mapping as shown in the image. In Specify value field, IT admins can enter either 0 or 1. Set the value to 0 to wake Bixby and 1 to open the power off menu. Disable Allow end-user modification of this setting to disallow end-users to modify settings. The corresponding menu item on the UI is grayed out. Enable Configure to hide settings to hide this setting from the UI.
2. Configure unique deep settings
The following describes how to set specific deep settings that require configuration beyond simply enabling or disabling a specific control. This section will be periodically updated as unique deep settings requiring specific configuration values are added.
-
Refer to the Show notification icons controls to define whether
all or some notifications display on the device. Notification setting,
(battery percentage, icon display, etc.) adjustments are made within the
Lockscreen customization policies
section. Enter the notification icon display setting as one of the
following numeric values:
- 0— All notifications are received.
- 1— Only the three most recent notifications are received.
- 2— Notifications are turned off and none are received.
- 3— Notifications are enabled, but only a defined number are received.
-
Set one of the following Language Shortcut values to configure
how language shortcuts are utilized on the device. Language settings are
configured within the
Device settings policies section, while
other language settings such as preferred speech engine, pitch and
speech rate can be set within the
Lockscreen customization policies
section. Enter the Language shortcut setting as one of the following
numeric values:
- 1— shift+space
- 2— ctrl+space
- 3— shift+space & ctrl+space
- 4— left alt+shift
- 5— shift+space & left alt+shift
- 6— ctrl+space & left alt+shift
- 7— All
3. Deploy deep settings
The following example describes how to use the policy that hides all notifications on the locked device screen to automatically secure target devices in a group called High security devices.
- After you have created a deep settings policy in your chosen Device Configuration Policy, go to Groups > All groups.
- Within the All groups page, confirm the High security devices device group exists. Refer to your UEM console's help documentation for information on creating a new, or editing an existing, device group.
- Go to the Device Configuration Policy that contains the appropriate deep settings configuration > click Assignments > Include tab.
- On the Include page, in the Assign to list, select High security devices > click Save.
- Depending upon the settings chosen for deploying Device Configuration Policy changes, the new settings are deployed on the devices in the High security devices group.